Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: fLn4ViRzRckVw4xk8ItFAeOWSgfeyyElVFSJBpwR2Ro=
Subject key identifier: 0B:36:5C:59:0E:F5:F3:DE:09:58:5E:E4:2B:65:E7:1B:33:BE:D6:11
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 01974A7A69D9E285A98803162CC2E242E6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0272
Signing time: Sat 07 Jun 2025 13:00:25 +0000
Manifest this update: Sat 07 Jun 2025 13:00:25 +0000
Manifest next update: Sun 08 Jun 2025 13:00:25 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: q9E0NceIc/tIPv0LN8EH9hO7fF4pmX2G4Sv6CJ0A5Xs=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:69:d9:e2:85:a9:88:03:16:2c:c2:e2:42:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jun 7 13:00:25 2025 GMT
Not After : Jun 8 13:00:25 2025 GMT
Subject: CN=0b365c590ef5f3de09585ee42b65e71b33bed611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:f0:b4:78:52:09:c0:b5:24:3a:1f:6c:c5:
af:b7:06:91:53:05:ec:54:fc:95:8d:cd:e2:2a:87:
ec:0c:1b:ca:05:1c:cb:a2:64:8d:ed:30:fa:10:19:
ae:98:02:0f:5e:1e:a4:98:40:3a:2d:65:61:50:7d:
b0:2f:f3:43:e2:32:e0:99:43:4e:3d:03:92:70:5a:
1d:1f:ba:a8:19:5b:df:7b:db:4a:00:e4:a5:2e:57:
e7:96:0f:69:04:ef:67:97:23:7d:a0:a5:5b:07:5d:
44:90:13:3c:95:7a:ea:24:8e:ca:24:42:00:b6:2c:
44:d7:dd:6e:be:23:7c:8d:37:97:91:cf:77:8d:39:
4c:81:53:55:a0:f1:4a:31:3a:27:ea:9a:35:66:7d:
f2:a2:ad:2c:65:67:a7:35:d7:1e:14:02:de:85:83:
72:81:1b:e0:f4:98:77:6f:81:31:53:5a:0d:76:1a:
d8:8f:33:7d:5f:e1:ac:0d:83:3f:8b:8f:dc:8f:fc:
d4:cf:14:a4:c1:4e:ec:ac:81:f1:03:1d:29:3a:9a:
64:9f:fa:ad:31:7d:b2:7e:33:1e:0c:e8:b1:d4:88:
3e:b1:ef:ad:5a:bd:f2:4b:23:ec:7e:1f:05:af:e6:
15:8e:70:c8:19:4a:75:80:46:48:5b:c6:09:bd:42:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:5C:59:0E:F5:F3:DE:09:58:5E:E4:2B:65:E7:1B:33:BE:D6:11
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:a5:f1:ab:22:91:23:3f:a2:a3:f0:b9:04:7d:eb:90:ff:
3b:da:a9:54:1a:26:24:84:ff:d5:6b:a5:6a:3a:16:b1:c5:9c:
32:8a:1c:b1:ab:d0:8b:a4:72:9e:0d:26:50:cf:c7:75:9f:e1:
57:78:5e:41:70:ff:fd:fa:11:ce:b1:09:aa:44:91:51:8c:f1:
a4:de:46:1d:f9:e1:03:a8:3c:31:2a:aa:5b:34:27:8f:86:c5:
86:e3:1e:93:d4:ad:c2:ef:52:9b:8a:87:d4:a5:51:49:af:80:
ca:0b:b2:2a:18:5c:7d:ad:c9:25:af:10:55:89:c0:d1:1a:61:
1a:87:02:a8:cc:20:e4:9a:5d:38:3a:4d:e1:93:2f:06:f1:32:
77:8c:85:32:9e:69:a1:cf:fe:b1:1f:d0:46:21:bb:c9:10:6a:
f2:29:a0:82:81:f5:15:d0:d6:15:d2:59:01:b2:f6:6b:4a:4c:
fc:0c:b1:93:8c:c1:0f:61:80:fd:10:04:d6:c8:03:20:92:57:
30:de:29:07:3b:10:df:39:81:41:06:a5:a9:88:3e:82:a9:df:
80:a3:28:65:aa:e0:57:75:2e:7f:03:b0:69:21:ee:85:ed:e3:
02:c9:6f:54:af:b1:28:b9:e3:7a:fb:f1:d6:be:d4:03:6a:79:
1c:5e:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:31 2025 by rpki-client